We are satisfied to announce the release of: puppet-keystone 16.0.0: Puppet module for OpenStack Keystone This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/puppet-keystone Download the package from: https://tarballs.openstack.org/null/ Please report issues through: https://bugs.launchpad.net/puppet-keystone/+bugs For more details, please see below. 16.0.0 ^^^^^^ New Features ************ * Adds interface parameter to keystone::resource::authtoken allow services to configure the interface to use for the Identity API endpoint. Valid values are "public", "internal" or "admin". Deprecation Notes ***************** * The service validation in keystone::service is deprecated so the following parameters in keystone::service has no effect anymore, validate, admin_token, admin_endpoint, retries, delay, insecure, cacert. * The service validation in ::keystone is deprecated so the following parameters has no effect validate_service, validate_insecure, validate_auth_url and validate_cacert. * The user_allow_create, user_allow_update, user_allow_delete, group_allow_create, group_allow_update and group_allow_delete parameters in keystone::ldap_backend is deprecated, has no effect and will be removed in a later release. Changes in puppet-keystone 15.4.0..16.0.0 ----------------------------------------- 155b665 Prepare Ussuri M1 fa11274 Convert all class usage to relative names d8ab010 Remove writable ldap configs from examples and spec 3c95205 Remove keystone::service validation a811b43 Fix rabbitmq dependency a8f3616 New keystone::resource::authtoken::interface parameter cd6f0b6 Update master for stable/train Diffstat (except docs and test files) ------------------------------------- examples/apache_dropin.pp | 14 +-- examples/apache_with_paths.pp | 16 +-- examples/k2k_sp_shib.pp | 16 +-- examples/ldap_backend.pp | 16 +-- examples/ldap_full.pp | 10 +- examples/ldap_identity.pp | 7 +- examples/v3_basic.pp | 10 +- examples/v3_domain_configuration.pp | 10 +- manifests/client.pp | 2 +- manifests/config.pp | 2 +- manifests/cors.pp | 2 +- manifests/cron/fernet_rotate.pp | 2 +- manifests/cron/token_flush.pp | 2 +- manifests/db.pp | 2 +- manifests/db/mysql.pp | 2 +- manifests/db/postgresql.pp | 2 +- manifests/db/sync.pp | 2 +- manifests/endpoint.pp | 2 +- manifests/federation.pp | 2 +- manifests/federation/identity_provider.pp | 4 +- manifests/federation/mellon.pp | 6 +- manifests/federation/openidc.pp | 6 +- manifests/federation/shibboleth.pp | 6 +- manifests/init.pp | 99 ++++++---------- manifests/ldap.pp | 2 +- manifests/ldap_backend.pp | 93 +++++++++------ manifests/logging.pp | 2 +- manifests/messaging/amqp.pp | 2 +- manifests/params.pp | 2 +- manifests/policy.pp | 4 +- manifests/resource/authtoken.pp | 11 +- manifests/resource/service_identity.pp | 2 +- manifests/resource/service_user.pp | 4 +- manifests/roles/admin.pp | 2 +- manifests/security_compliance.pp | 2 +- manifests/service.pp | 70 ++++------- manifests/wsgi/apache.pp | 2 +- metadata.json | 8 +- .../authtoken_interface-2e8ccbd3e961e0fb.yaml | 6 + ...recate-service-validation-35fd28183776f94f.yaml | 9 ++ ...ove-writable-ldap-configs-020f66d8b93003bc.yaml | 6 + releasenotes/source/index.rst | 1 + releasenotes/source/train.rst | 6 + spec/acceptance/default_domain_spec.rb | 10 +- .../keystone_federation_identity_provider_spec.rb | 10 +- .../keystone_federation_shibboleth_spec.rb | 10 +- spec/acceptance/keystone_wsgi_apache_spec.rb | 10 +- spec/classes/keystone_init_spec.rb | 37 +----- spec/classes/keystone_service_spec.rb | 131 ++++++++++++++++----- spec/classes/keystone_wsgi_apache_spec.rb | 2 +- spec/defines/keystone_ldap_backend_spec.rb | 12 -- spec/defines/keystone_resource_authtoken_spec.rb | 3 + 52 files changed, 360 insertions(+), 341 deletions(-)